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The optimization of measurements for the state distinction problem has recently been applied 
to the theory of quantum algorithms with considerable successes, including efficient new quantum 
algorithms for the non-abelian hidden subgroup problem. Previous work has identified the optimal 
single copy measurement for the hidden subgroup problem over abelian groups as well as for the 
non-abelian problem in the setting where the subgroups are restricted to be all conjugate to each 
other. Here we describe the optimal single copy measurement for the hidden subgroup problem when 
all of the subgroups of the group are given with equal a priori probability. The optimal measurement 

qq \ is seen to be a hybrid of the two previously discovered single copy optimal measurements for the 

f"^ . hidden subgroup problem. 

o 

h-5 I I. INTRODUCTION 

(N . 

The hidden subgroup problem (HSP, defined below) is one of the most widely studied problems in the theory of 
quantum algorithms. The reasons for this are twofold. On the one hand, Shor's efficient quantum algorithms for 
factoring and for computing the discrete logarithm can both be seen as instances of the abelian HSP On the 
other hand, efficient algorithms for non-abelian HSPs would allow for efficient algorithms for the graph isomorphism 
problem 0, 111 || and certain unique shortest vector in a lattice problems Q, two problems that currently do not 
admit efficient classical or quantum algorithms. This latter fact has motivated a great deal of research into whether 
quantum computers can efficiently solve the non-abelian HSP, with notable successes 0, H, M, E3, EH El, EH E3 , but 
with no success in finding efficient quantum algorithms for the HSP over groups that would yield efficient algorithms 
i ^ I for the graph isomorphism and the shortest vector problems. 

Recently an approach to solving the non-abelian HSP has emerged by recasting the problem as a state distinction 
£NJ ■ problem [3, EM 13 • I n this setting, optimal measurements for solving the problem can be derived and in some special 
cases these measurements can be efficiently implemented and lead to an efficient quantum algorithm for the relevant 
HSP. Thus, for instance, this approach has led to an efficient quantum algorithm for the HSP over the Heisenberg 
group and a natural generalization of this group [l4| ■ The first to consider optimal measurements for the HSP was Ip 
[1 51 ] , who considered this problem in the abelian setting when all subgroups are given with equal a priori probability. 
Ip derived an optimal measurement for the HSP in this case and showed that it corresponds to Shor's algorithm. 
Explicit optimal measurements for HSPs over the dihedral group [l|| and the Heisenberg group [3] were then derived 
by Bacon, Childs and van Dam. It was observed that in both of these cases the optimal measurement was the so-called 
pretty good measurement (PGM) [l7|. Building on this result, Moore and Russell [l8[ showed that the PGM is the 
optimal single copy measurement for the non-abelian HSP when all of the subgroups are conjugate to each other and 
is the optimal multi-copy measurement for the non-abelian HSP when the subgroups are all Gel'fand pairs with the 
group [18|] . Here we derive the optimal single copy measurement for the HSP when all of the subgroups are given with 
equal probability, removing the restriction of Moore and Russell that these subgroups are conjugate to each other. 
The measurement we derive can be seen as a hybrid between the measurement of Ip |15j and the PGM flfl Elj. 



II. THE HIDDEN SUBGROUP PROBLEM AND OPTIMAL MEASUREMENTS 

We begin by defining the hidden subgroup problem. A detailed review of this problem can be found in [l!|. 

Hidden Subgroup Problem (HSP) Let Q be a group and / a function from elements of this group to 
some set S. This function is promised to be constant and distinct on different left coscts of a subgroup 7i 
of Q. The hidden subgroup problem is to identify, by querying /, the subgroup Ji. 

In all of the cases we work with, Q will be finite, and elements of Q and of S will be expressed as 0(poly log \Q\) 
bitstrings. An algorithm for the HSP is considered to be efficient when the running time is polynomial in log | £7 1 . 
By identifying TL we do not require that all of the elements of 7i be returned, but only that a generating set or any 
succinct description of the subgroup be returned. When Q is abelian, we call this problem the abelian HSP and 
similarly when Q is non-abelian we call this problem the non-abelian HSP. 
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In the standard query model of the hidden subgroup problem, one approaches a quantum algorithm for the HSP 
by querying the function / in superposition over the group elements. This produces the state 



LX>>®I/G*)>- (1) 

1^1 geg 



The second register of this state (whose range is the set S) is then discarded and we obtain a mixed state depending 
only on the subgroup TL hidden by /, 

Pw = tSX>W>(sW|, (2) 

geg 

where we have defined the left coset states 

v\ H \ hen 

and Q is a set of coset representatives for the subgroup TL. We call pu the hidden subgroup state. In the standard 
approach to solving the hidden subgroup problem on a quantum computer, one is given access to one or many copies 
of p-j-(. The goal is then to perform a set of quantum gates and a measurement that efficiently identifies TL. 

In the optimal measurement approach to the HSP, one examines the HSP from a state distinction perspective. 
Suppose that the function / hides TL with probability p^. Then in the single copy case, we can assume that we 
have been given p-H with probability p-j-i- One then attempts to find a generalized measurement that maximizes the 
probability of successfully identifying the hidden subgroup TL. A generalized measurement can be described by a set 
of positive operators that sum to identity. If E-h is the measurement operator corresponding to our guessing that the 
hidden subgroup is TL, then the optimal measurement problem in the single copy case maximizes the probability of 
successfully identifying the subgroups, 

Psucc = 22 Ph^IphEh], (4) 

HGSub(S) 

subject to E-h being a valid generalized measurement: En > and Y^neSubfg) = !■ Here Sub(C?) is the set of 
subgroups of Q. This is the well-known problem of state distinction. The state distinction problem was considered 
in the seventies by Holevo [20], and Yuen, Kennedy, and Lax [2l| where necessary and sufficient conditions for the 
optimal measurement were derived for the generic state distinction problem. Applied to the above formulation of the 
hidden subgroup problem, these necessary and sufficient conditions yield that a measurement En is optimal if and 
only if 

22 PhEhPh = E PhPhEh, 
•HeSub(S) HeSub(S) 

^2 PhEhPh > PwPw, for all TL' e Sub(£). (5) 

•Hesub(s) 

We may also consider the multi-copy optimal measurement, where we query the function r times. In that case we 
produce r copies of the hidden subgroup state p-u , and the optimality condition is obtained by simply replacing p-u 
by p®[ in Eq. ©. 

In 15], Ip considered the question of identifying the optimal measurement for the abelian HSP when each of the 
subgroups of Q is given with equal a priori probability. Here we briefly review this result. Define 

Pn := ^Pu- (6) 

The optimal single copy measurement for the abelian HSP is then given by the measurement operators (recursively 
defined) 



E H :=Ph-J2 

JDH 



(7) 
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In the case of r copies, the optimal measurement is given by the similar expression 

J3«?:=J*r- J^EP. (8) 

JDH 

Finally Ip also showed that for the HSP over the dihedral group, the above expression is not the optimal measurement. 

Following Ip's work, Bacon, Childs, and van Dam considered the optimal measurement for the HSP over the 
dihedral [Ty| and the Heisenberg groups [l4j. In both of these cases, the measurement turned out to be the pretty 
good measurement (PGM), so named because it does a good job of identifying states [13] ■ If the state pi is given with 
probability pi, then the PGM is a measurement consisting of measurement operators defined as 

Ek := piM-^piM- 1 ' 2 , M := ^p iPi , (9) 

i 

where the inverse square root M~ 1 / 2 is taken over the support of M. Bacon, Childs, and van Dam showed that 
the PGM was optimal for the dihedral and Heisenberg HSPs for both the single and multi-copy case and when the 
subgroups were restricted to certain order 2 or order p subgroups (which is enou gh t o be able to solve the HSP over 
all subgroups due to a generalization of a theorem of Ettinger and H0yer [3, IT5. l22j.) 

Finally, Moore and Russell showed that under certain further conditions the PGM is guaranteed to be optimal 18]. 
In particular they showed that if the hidden subgroup is restricted to come from the set of subgroups conjugate to a 
fixed subgroup, then for the single copy case, if these subgroups are sampled with uniform probability the PGM is 
optimal. Further Moore and Russell showed that the PGM is optimal for the multi-copy case when all of the hidden 
subgroups form Gel'fand pairs with the parent group. 

It is easy to see that for the abelian HSP, the optimal measurement is not always the PGM. For instance, suppose 
that the group is Q = I2 and the hidden subgroup is either the entire group, {e, r} or the trivial subgroup, {e} with 
equal probability. Then the hidden subgroup states are simply 

PD = |(|e> + |r»«e| + <r|), pi = |(k>< e | + |r)(r|) (10) 

Defining |±) := ^(|e) ± |r)), we can express these as po = |+)(+| and pi = |(|+)(+| + |— )(— |). It is then easy to 
calculate that the PGM has measurement operators 

Eo = l\+)(+\ and £ 1 = i|+)(+| + |-)(-|. (11) 

The probability of successfully identifying the subgroup is then P SUC c = ^Tr[_EoPo + E1P1] — f ■ However, if we had 
chosen the optimal measurements Fq = |+)(+| and F\ = |— )(— |, then this succeeds with probability |. We therefore 
see that the PGM is not optimal. We can thus conclude that while the PGM is optimal for a plethora of HSPs, it 
is not always so. Therefore, an important unsolved question in the optimal measurement approach to the HSP is to 
determine the optimal measurement for the HSP beyond the cases where the PGM is optimal or Ip's measurement is 



optimal (see [23[ and [24| for the near optimality of the PGM). 

In this paper we derive the optimal single copy measurement for the HSP when the subgroups are chosen from all 
possible subgroups with equal probability. We will show that this measurement is a hybrid between the PGM and 
the measurement procedure elucidated by Ip. 

III. OPTIMAL SINGLE COPY HIDDEN SUBGROUP PROBLEM MEASUREMENT 

We begin by reviewing properties of hidden subgroup states and then turn to identifying the optimal measurement. 
We find the optimal measurement by choosing a measurement ansatz that is a hybrid between the PGM and the 
measurement described by Ip [l5j . 

A. Properties of the Hidden Subgroup State 



The hidden subgroup state, given by Eq. ^ above, has many symmetries and properties that we can use for 
constructing the optimal measurement. Here we review these properties, and the reader is referred to older papers 
like [25| where these properties are described in more detail. 
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First, define the left and right regular representations of Q. The left regular representation is the representation 
of Q given by D L (g')\g) = \g'g). Similarly the right regular representation is defined by D R (g')\g) — Igig')^ 1 )- The 
hidden subgroup state can, because it is symmetric under the left regular representation, D i,(g) p-^D = pn, be 
written as a sum over right regular representation elements. In fact it can be written in the particularly simple form 



If we define the subgroup projection operator 



P* = W\ E Dr ( H) - 

11 hen 



p K ■■= m E D *W> 



(12) 



(13) 



then we can express the hidden subgroup state as pu 



1 hen 

m 

161 



P-H . The reason for doing this is to notice that Pq-i is a 



projector, P^ = Ph and to further note the role of this projector in the construction of the optimal measurements 
like those constructed by Ip [151 ]. 

While expressing the hidden subgroup state in terms of the right regular representation is helpful, it is even more 
helpful to examine this state in a different basis. If we perform the quantum Fourier transform over the finite group 
Q, this transforms the basis of group elements {|<7}} to a basis with irreducible representation (irrep) labels along with 
row and column registers, In this basis the hidden subgroup state is 



Pn 



= 



W\ E D » [h) 

11 hen 



(14) 



where p labels the irreducible representations of Q, is the pth irrep, is the dimension of the pth irrep, and J<j 
is the dimensional identity operator. Defining the subgroup projectors Ph for the pth irrep, 



P^n ■= 



n 



hen 



we can express the hidden subgroup state as 



Ph 



= 



\T~l\ 



(15) 



(16) 



A final useful symmetry relationship that we will use later comes about when we sum the projectors P^h over all 
conjugate subgroups. A conjugate subgroup of H is defined as H 9 :— {ghg~ x .h e H} for g G Q. In particular we 
recall that Sgee E) ^(ghg^ 1 ) commutes with all D^g') and thus, via Schur's lemma, it must be proportional to the 
identity matrix (this proportionality may be zero), 



Y J D^{ghg- 1 )=r^h)I d ^ 

geg 

where r^(h) is the proportionality constant. Taking the trace of this equation allows us to calculate r^{h): 



geg 



where X/i(sO := Tr[.D M (<7)] is the character of element g in irrep p. Thus we obtain 



11 geg 



-y 



H 



Id,, 



(17) 



(18) 



(19) 



hen 



B. The Optimal Single Copy Measurement 



The optimal measurement criteria, Eq. ([5]), when all of the subgroups are given with equal a prior probability is 
given by 

pnEn = ^2 E npn 

■HeSub(S) WeSub(S) 

PnEn > Pn>, for all 7i' E Sub((/), (20) 

•HeSub(e) 
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where this sum over TL is over all possible subgroups of Q. Notice that if pn and Eu commute, then the first equation 
is satisfied. This will be true of the measurements we will consider, so the second equation will be the nontrivial 
condition. 

Our ansatz for the optimal measurement is a measurement of the form 

E n = © ® ^,hP»,h] ■ (21) 

A" 

where c^.h are as of yet undetermined constants. The reason for be gin ning; with this assumption is that it can easily 
be shown that the previous results of Ip [15j | and Moore and Russell [18j can be written as measurements of this form. 
Notice that this choice of measurement implies that pn and Eji commute so the first optimal measurement criteria 
is automatically satisfied. Thus we must show that the second measurement criteria is satisfied, while the condition 
that the measurement is valid also holds. The Eji of our chosen form are a valid measurement if and only if c„ > 
and, for all /i, 

£ c ^nP^n = W (22) 
•HeSub(S) 

It will be convenient to break the sum over all subgroups that appears here down into a sum over conjugate 
subgroups. In particular two subgroups TL\ and TLi are conjugate if there exists an element, g of Q, such that 
Ti.2 = {ghg^ 1 , h G TLi}. Whether two subgroups are conjugate to each other forms an equivalence relation and thus 
we can partition the set of all subgroups of Q into sets of conjugate subgroups. Let C(Q) be the set of all of these sets 
of conjugate subgroups. Then a sum over all subgroups TL of Q can be broken down into a sum over different sets of 
conjugate subgroups, i.e. 

£ = £ £• (23) 

HeSub(g) cec(g)H£C 
Applying this to the condition that the En are valid measurement operators yields, 

E J2 C ^ P ^ = W (24) 

CeC(G)H£C 

or, explicitly performing the sum over conjugate subgroups, 

ICI 

E E ]c[ c M,s'Hc9- li M,s'Hcs- 1 = I d» (25) 
cec(g)geQ {y{ 

where |C| is the number of the subgroups in C, Tic is a representative subgroup of C and P^^gHcg -1 ^ s ^ ne i rre P 
projector onto the subgroup gHcg^ 1 — {ghg^ 1 ^ G He}- 

We now make the further assumption that c^.u depends only on which C £ C(Q) the TL belongs to. Then we obtain 

E TQ\ c ^C'Y. P ^9Hcg- 1 =I d, (26) 
cec(S) |y| gag 

Now exploit the fact that we have symmetrized the projectors over the group Q. This is the trick relevant to the 
construction of Moore and Russell where they demonstrate that the PGM is optimal for subgroups selected unifo rmly 
from a set of conjugate subgroups [18| • While the case we consider includes a symmetrized sum like that used in [18l ]. 
our more general setting also has a sum over the different sets of conjugate subgroups. Using Eq. (|19p we find that 



(<l c u , c E X„(h)=l, (27) 



Cec(e) 1 1 fteWc 

where \Ti.c\ is the number of elements in the subgroup Tic- 

Now back to the nontrivial inequality for the optimal measurement. This is, for all Ti.' £ Sub(C7) and for all irrep 
labels p, 

E [H\c^HP^H>\n'\P^ w . (28) 

HeSub(H) 
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Turning the sum on the left hand side into a sum over conjugate subgroups this becomes 

]T Yl \ n K.cP»,n > \n'\p„, w (29) 

CeC(G)H£C 



or 



E T, l ^i§r c ^ P ^nc a ^>\n'\P^w (30) 
Using our expression for the sum over the conjugate projectors, Eq. (fT§|) , we obtain 

E \°\^T E X^h)Id. > (31) 

c 

Defining 



s^CHc) ■= j^-, £ X», (32) 

we can then write the condition that the generalized measurement is a valid measurement as 

E s/»(^)c ft c = l, c M ,c7>0 (33) 
cec(S) 

and the optimality condition as 

Y \HcKCHc)c»,chr > \n'\P^H> (34) 
cec(e) 

for all 7i' £ Sub(^). Note that s M (7i)c is a non-negative real number. Equations (f33|) and (|34|) represent the optimality 
criteria for our ansatz. We will now show that it is possible to choose a particular c^.c that satisfies both of these 
equations and thus we will have identified the optimal measurement. 

Begin by examining the condition of Eq. (fM)) for a fixed TL' . If P^^-t' = 0, then this condition is automatically 
satisfied. Thus we can assume P^.w ^ 0. Now we will choose the constant c Mj c that yields the optimal measurement. 
Pick the largest subgroup TL such that P^n ^ (break ties arbitrarily) and call it 7i ma x- This subgroup will belong 
to a particular set of conjugate subgroups, call this C max (/i). Then set 

if C = C max (//) 



M ' C 10 if C i C max (n) [M) 

(Note that s^(TLc) is not zero because of our condition that P^.n 1 ^ 0.) Certainly this expression for c^.c obeys the 
normalized measurement condition and is positive. Further, since TLmax is the largest subgroup with P^^n ^ all of 
the inequalities of Eq. (|3"4"|) will also hold. This is because on the left hand side we have the identity operator and 
on the right hand side we have a projector and since these two are both diagonal in a fixed basis, the inequalities 
turns into an inequality between the constants appearing before these operators. Since |7i max | is larger than all \TL\ 
for which P^^-L 7^ 0, it follows that these constants in front of the operators obey the inequality. Thus we have shown 
that this measurement is the optimal measurement for the single copy hidden subgroup problem. 

It is useful to rephrase the optimal measurement we have derived. The optimal measurement consists of measure- 
ment operators of the form 

E n =0^, ®e^ n P^ H (36) 



where 



if n e c m M 



e uH = i \C^W\^ H ^xAh) ,luc ^' . (37) 

[0 ifW^CmaxOu) 

It is easy to see that in our derivation of the optimal single copy measurement, had we restricted ourselves to 
only one set of conjugate subgroups, we would have obtained the PGM, while if we had restricted ourselves to only 
subgroups belonging to different sets of conjugate subgroups we would have obtained a measurement like that of 
Ip [151 ]. Thus the optimal measurement for a single copy of the HSP is a hybrid between the previous two known 
single copy optimal measurements for the HSP. 
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C. Strengthening the Result 

It is also possible to strengthen our result beyond the case where all subgroups are given with equal probability. In 
particular consider the case where the probability of a subgroup is uniform across different conjugate subgroups, but 
allowed to vary between the different conjugate subgroups. In such a setting, the a prior probability of a subgroup 
Pu depends only on which set of conjugate subgroups TL belongs to. In other words, consider a probability pu such 
that pu = Pfi* if TL and TL' are conjugate to each other. Keep p-y^ throughout the calculations performed above leads 
to a set of conditions similar to Eqs. ()33|1 and (|34[1 . In particular the condition that the generalized measurement is 
a valid measurement remains unchanged, 

« / ,(«c)^c = l, c M , c >0 (38) 

cec(s) 

but the optimality condition becomes 

PHc\Hc\s t i(Hc)c^cId tl >Pw\'H , \P^H> (39) 

cec(g) 

for all TL' G Sub((/). From this expression it is clear that instead of choosing the largest TL such that P Mi k ^ 0, the 
above condition can be satisfied by choosing a subgroup TL* with P^.h, 7^ such that pu„ \ is maximal (breaking 
ties arbitrarily.) Let C* denote the set of conjugate subgroups to which such a TL* belongs. Given this choice the 
optimal measurement will have the form 

£rw = ©/d ( ,®e M>w P ftW (40) 

where 

euH = l 1^)1 VhJ'xAV iiHE . (41) 

Thus we have solved the slightly more general problem of the optimal measurement when the a priori probability of 
a subgroup is required to be constant only across conjugate subgroups. Optimal measurements for arbitrary a priori 
probability distributions are likely to be more difficult to obtain, since the symmetry arguments we have used do not 
hold in such a setting. 



IV. CONCLUSION AND OUTLOOK 



We have determined the optimal measurement for a single copy of the HSP when all possible subgroups of a group 
are given with equal a priori probability. We have also presented a slightly stronger version of this problem where the 
a priori probabilities are uniform over conjugate subgroups. An important open problem is to determine the optimal 
measurement in the multi-copy version of this problem for the case where subgroups are given with uniform a priori 
probability. This is especially true since it is known that a multi-copy measurement is necessary for any algorithm that 
hopes to efficiently solve the HSP for the symmetric group [26| . Recent results for the Heisenberg HSP [25|, H3, [28| 
give us the intuition that this measurement must have a block diagonal form related to the Clebsch-Gordan transform 
over the group Q. 
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